$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: 36k36hidrdfpKZV6I4B1ZGIKQSlMXYt4c5WAga2nitE= Subject key identifier: 0B:EB:72:33:A2:99:96:45:D6:A3:0F:95:A5:56:0E:B1:88:D7:E9:8C Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 68F9DC312F57B3F248C3FAD62EED9DF9E811FD4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: 7C Signing time: Mon 16 Jun 2025 00:51:04 +0000 Manifest this update: Mon 16 Jun 2025 00:46:04 +0000 Manifest next update: Thu 19 Jun 2025 08:56:04 +0000 Files and hashes: 1: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: WgxHpyy/3MqsF9jWni+PGWuaEgp3UpQyp4F6QBKA6h4=) 2: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 0CvOPtspHIv++OpYpPeOAtYrJalD1E7T3Av1Tkd5zHo=) 3: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: M1UfgBl+o+VtOJt76FjRKdEJWLXVwypZfHtYeDLVMfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 08:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f9:dc:31:2f:57:b3:f2:48:c3:fa:d6:2e:ed:9d:f9:e8:11:fd:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Jun 16 00:46:04 2025 GMT Not After : Jun 19 08:56:04 2025 GMT Subject: CN=0BEB7233A2999645D6A30F95A5560EB188D7E98C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:6e:45:c3:5b:97:04:39:e7:64:6d:4a:b2: 47:8c:b2:70:a0:6b:bb:30:33:b4:bc:71:63:e4:09: 03:b8:95:26:32:a0:99:41:ae:65:44:dd:e0:5a:fe: 71:1a:fb:a4:a4:76:4d:98:00:e6:5b:33:73:e9:8b: b5:06:b8:f9:7f:ec:26:9f:6c:41:27:24:6c:9e:ab: 30:63:38:61:13:88:ef:99:05:70:70:07:2a:b5:e6: b4:37:06:c3:97:a4:52:13:9a:d0:9f:30:b6:14:e4: ba:0c:6d:8c:74:6a:1f:0c:70:e9:24:f0:90:ef:b6: 76:c4:90:c6:3b:cc:2d:c5:a1:0b:6f:20:dd:64:98: 8e:a9:97:31:79:56:9d:46:03:cc:8e:70:f0:56:2a: 7b:72:cb:b6:f2:43:d3:12:c6:3a:91:cc:0e:4b:e1: 93:b2:6b:f6:93:9d:3f:f7:f0:3d:c3:a5:02:93:bc: 63:de:5f:ed:ae:c2:91:5c:41:50:aa:bf:2a:8d:51: 71:a8:65:69:d7:15:88:aa:d2:47:da:b5:49:1f:a6: 5b:04:6a:71:c0:ca:1b:44:e4:3d:d2:25:21:c9:4e: a9:90:ee:7a:97:50:2b:0a:7e:f6:3e:96:76:b0:49: b0:56:7c:71:62:b7:59:b3:97:b4:07:13:dd:f1:1e: 56:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EB:72:33:A2:99:96:45:D6:A3:0F:95:A5:56:0E:B1:88:D7:E9:8C X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:26:75:8d:a0:fb:16:73:de:bc:9e:f9:d0:ec:a7:e6:4e:ab: a2:30:64:09:5e:4a:05:50:be:02:9c:5e:61:01:e8:e2:0f:be: 4c:54:00:7c:d2:18:36:f9:36:88:db:6d:0f:b9:27:f5:10:57: d8:56:2d:dd:74:52:84:ef:1e:4d:0f:e3:87:1d:84:da:b0:cb: 69:ac:8e:41:4e:5c:52:5e:62:0c:80:82:28:7b:f0:8a:53:5f: 82:de:9f:d2:9e:b6:52:b5:c5:bd:a1:62:99:44:15:6f:d7:f8: 08:bc:e4:95:54:e5:2e:22:7f:54:98:2e:e6:5b:be:eb:7e:38: 9c:97:d9:b8:e6:87:7c:b6:12:ef:35:55:0d:b4:1f:c0:70:68: a4:d7:53:d0:63:94:7c:41:f0:38:74:0c:f4:43:d6:08:3f:d3: 35:7d:a1:17:d1:89:a3:58:a4:3d:4d:f0:22:f4:e5:01:17:a0: 9b:66:4d:27:76:58:00:58:73:2e:1f:f0:af:96:44:e9:12:3e: 02:68:4c:a2:0c:7e:6f:73:4c:68:6e:17:ed:35:74:f3:ca:a0: 5c:8c:5f:d3:81:cb:b4:c9:ec:d8:b6:5b:50:ca:b6:a4:78:6a: 12:fd:45:7c:c6:30:5c:7a:d5:3c:06:5f:80:3e:fa:b6:be:a2: 02:8e:90:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPncMS9Xs/JIw/rWLu2d+egR/UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNTA2MTYwMDQ2MDRaFw0yNTA2MTkwODU2MDRaMDMxMTAvBgNV BAMTKDBCRUI3MjMzQTI5OTk2NDVENkEzMEY5NUE1NTYwRUIxODhEN0U5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrPm5Fw1uXBDnnZG1KskeMsnCg a7swM7S8cWPkCQO4lSYyoJlBrmVE3eBa/nEa+6Skdk2YAOZbM3Ppi7UGuPl/7Caf bEEnJGyeqzBjOGETiO+ZBXBwByq15rQ3BsOXpFITmtCfMLYU5LoMbYx0ah8McOkk 8JDvtnbEkMY7zC3FoQtvIN1kmI6plzF5Vp1GA8yOcPBWKntyy7byQ9MSxjqRzA5L 4ZOya/aTnT/38D3DpQKTvGPeX+2uwpFcQVCqvyqNUXGoZWnXFYiq0kfatUkfplsE anHAyhtE5D3SJSHJTqmQ7nqXUCsKfvY+lnawSbBWfHFit1mzl7QHE93xHlalAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC+tyM6KZlkXWow+VpVYOsYjX6YwwHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgmdY2g+xZz3rye+dDsp+ZOq6IwZAleSgVQ vgKcXmEB6OIPvkxUAHzSGDb5NojbbQ+5J/UQV9hWLd10UoTvHk0P44cdhNqwy2ms jkFOXFJeYgyAgih78IpTX4Len9KetlK1xb2hYplEFW/X+Ai85JVU5S4if1SYLuZb vut+OJyX2bjmh3y2Eu81VQ20H8BwaKTXU9BjlHxB8Dh0DPRD1gg/0zV9oRfRiaNY pD1N8CL05QEXoJtmTSd2WABYcy4f8K+WROkSPgJoTKIMfm9zTGhuF+01dPPKoFyM X9OBy7TJ7Ni2W1DKtqR4ahL9RXzGMFx61TwGX4A++ra+ogKOkA4= -----END CERTIFICATE-----Generated at Mon Jun 16 15:22:32 2025 by rpki-client